[Operators] Recent Google XMPP Federation problems

[Arnaud Abélard]

David Horwitz wrote:
> 
> 
> 
>> Actually, i just noticed something bad, bad, bad from google. When 
>> activating Google Apps For Teams Edition, it actives gtalk 
>> automatically for the domain, so i guess the rerouting behavior was 
>> understandable in my case. I just disabled it, and hope we'll see some 
>> change in a few hours/days.
>>
> 
> What does it take to activate this? Do you need to supply come kind on 
> domain ownership? Otherwise this is very bad (any one of our 26K+ staff 
> or students could kill our XMPP federation)
> 


Yeah, of course. They ask you to prove you own or manage the domain by 
either setting a cname redirecting to google.com or uploading a special 
html page to your domain. But in my case, someone tried to activate apps 
for our domain, so i had to prove I was the owner but for some reason 
never got access to the administration area until I requested it today. 
That's when i noticed that gtalk was activated by default, even before 
anyone had access to the administration pages, which is bad!

Arnaud


> 
> 
> David
> 
> 
>> On another note, it would be indeed usefull to have a modus operandi 
>> for XMPP Federation related problem reporting with google.
>>
>>
>> Arnaud
>>
>>
>>>
>>> David
>>>
>>> Arnaud Abélard wrote:
>>>> Justin Uberti wrote:
>>>>> All,
>>>>>
>>>>> The fix went into production today. XMPP Federation should be 
>>>>> working normally for all domains.
>>>>
>>>> Thank you very much for this update Justin. Is it normal that I can 
>>>> not see anything change in the situation yet? Google still seem not 
>>>> to be able to reach our domain.
>>>>
>>>> The explanation you gave made me think about the fact we activated 
>>>> google apps team edition on our domain to give it a try but we never 
>>>> meant to enable gtalk for it. Our domain already has its XMPP 
>>>> service running properly with the right SRV entries and all. I 
>>>> didn't think that all our XMPP trafic would be rerouted back to 
>>>> google or is that actually the problem the fix was supposed to, 
>>>> well...fix?
>>>>
>>>> Am I the only one not noticing any improvement yet?
>>>>
>>>> AA.
>>>>
>>>>>
>>>>> --justin
>>>>>
>>>>> On Fri, Feb 22, 2008 at 5:47 AM, Keith Burgoyne 
>>>>> <keith at silverorange.com <mailto:keith at silverorange.com>> wrote:
>>>>>
>>>>>     Thanks for getting back to us Justin. We appreciate your efforts!!
>>>>>
>>>>>     Justin Uberti wrote:
>>>>>      > Hi,
>>>>>      >
>>>>>      > There's been some discussion on this list about recent changes
>>>>>      > regarding XMPP Federation at Google, and wanted to provide some
>>>>>      > information on this issue.
>>>>>      >
>>>>>      > The recent launch of Google Apps Team Edition caused a 
>>>>> problem that
>>>>>      > broke XMPP Federation for some domains. In a nutshell, the 
>>>>> issue was
>>>>>      > that certain domains were being treated as if they were 
>>>>> hosted at
>>>>>      > Google, as opposed to being federated with Google. This 
>>>>> prevented
>>>>>     XMPP
>>>>>      > packets from being routed properly.
>>>>>      >
>>>>>      > A fix has been identified and existing federated domains 
>>>>> should start
>>>>>      > working again soon. The fix also prevents the problem from 
>>>>> happening
>>>>>      > in the future with new federated domains. I'll send another 
>>>>> update
>>>>>      > when the fix is live in production.
>>>>>      >
>>>>>      > Thanks,
>>>>>      > Justin Uberti
>>>>>      > Tech Lead
>>>>>      > Google
>>>>>
>>>>>
>>>>
>>>>
>>
>>


-- 
Arnaud Abélard (jabber: arnaud.abelard at univ-nantes.fr)
Administrateur Système
Centre de Ressources Informatiques
Université de Nantes
-
ne pas utiliser: trapemail at univ-nantes.fr